Emily

SWE/builder/bilingual

[Emily @0xEmilyll]

@suiaudit Proud to have built alongside the team during this journey.

We shipped real tools, real research, and contributed to the Sui ecosystem as builders. Thanks everyone who supported and collaborated with us along the way.

Looking forward to everyone’s next chapter.

[Nick Fox @thefox]

Celebrating 20 years of Google Translate and… the launch of a top-requested feature! 🎂

One of the toughest things about speaking a new language is getting the nuances of pronunciation just right. Now, you can get instant feedback with "pronunciation practice,” which uses AI to analyze your speech and help you improve.

Launching in the US & India in English, Spanish & Hindi, with more to come!

[Google AI Studio @GoogleAIStudio]

start vibe coding with your Google AI plan

AI Pro and Ultra subscribers now get higher usage limits and access to nano banana pro and gemini pro models

[Google Gemma @googlegemma]

Gemma 4 can run on phones without an internet connection! 🤯

It can perform local agentic tasks, such as logging and analyzing trends. When connected, it can also make API calls.

Want to try it yourself? Get the Google AI Edge App on iOS or Android. (🔊 Sound on for the demo!)

[Google @Google]

Too many @GoogleChrome tabs open? Try vertical tabs, rolling out now.

Just right-click any Chrome window and select “Show Tabs Vertically” to move your tabs to the side of the browser window, making it easier to read page titles and manage tab groups.

[Google @Google]

We just released Gemma 4 — our most intelligent open models to date.

Built from the same world-class research as Gemini 3, Gemma 4 brings breakthrough intelligence directly to your own hardware for advanced reasoning and agentic workflows.

Released under a commercially permissive Apache 2.0 license so anyone can build powerful AI tools. 🧵↓

[NASA Earth @NASAEarth]

That's us! 🌍

The Artemis II crew captured beautiful, high-resolution images of our home planet during their journey to the Moon. As @Astro_Christina put it: "You guys look great."

[Feross @feross]

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.

The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.

This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.

Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:

• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence

If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

[Andrej Karpathy @karpathy]

Software horror: litellm PyPI supply chain attack.

Simple `pip install litellm` was enough to exfiltrate SSH keys, AWS/GCP/Azure creds, Kubernetes configs, git credentials, env vars (all your API keys), shell history, crypto wallets, SSL private keys, CI/CD secrets, database passwords.

LiteLLM itself has 97 million downloads per month which is already terrible, but much worse, the contagion spreads to any project that depends on litellm. For example, if you did `pip install dspy` (which depended on litellm>=1.64.0), you'd also be pwnd. Same for any other large project that depended on litellm.

Afaict the poisoned version was up for only less than ~1 hour. The attack had a bug which led to its discovery - Callum McMahon was using an MCP plugin inside Cursor that pulled in litellm as a transitive dependency. When litellm 1.82.8 installed, their machine ran out of RAM and crashed. So if the attacker didn't vibe code this attack it could have been undetected for many days or weeks.

Supply chain attacks like this are basically the scariest thing imaginable in modern software. Every time you install any depedency you could be pulling in a poisoned package anywhere deep inside its entire depedency tree. This is especially risky with large projects that might have lots and lots of dependencies. The credentials that do get stolen in each attack can then be used to take over more accounts and compromise more packages.

Classical software engineering would have you believe that dependencies are good (we're building pyramids from bricks), but imo this has to be re-evaluated, and it's why I've been so growingly averse to them, preferring to use LLMs to "yoink" functionality when it's simple enough and possible.

[Stitch by Google @stitchbygoogle]

Meet the new Stitch, your vibe design partner.

Here are 5 major upgrades to help you create, iterate and collaborate:
🎨 AI-Native Canvas
🧠 Smarter Design Agent
🎙️ Voice
⚡️ Instant Prototypes
📐 Design Systems and DESIGN.md

Rolling out now. Details and product walkthrough video in 🧵

[💧SuiAudit💧 @suiaudit]

Can small models actually outperform the giants? 🤔

We’re thrilled to announce that our latest research paper is now LIVE on TechRxiv! 🚀

Building on our recent teaser: "Can Small Models Beat Frontier LLMs? Introducing SuiAudit Pure1: Specialized Auditing via Extreme Low-Resource Fine-Tuning"
We’re proving that with the right tuning, size isn't everything in #CyberSecurity.

Read the full breakthrough here: 🔗 https://t.co/3uaDXkPLVF

#Sui #Pure1 #AI #Web3Security #TechRxiv #LLM #SuiAudit

[💧SuiAudit💧 @suiaudit]

Something "Pure" is on the way! 🌊🛡️

Exciting news: Our latest research paper, "Can Small Models Beat Frontier LLMs? Introducing SuiAudit Pure1," is officially submitted and currently under review at TechRxiv.

We’re proving that specialized small models can punch way above their weight in cybersecurity. Stay tuned—the full reveal is coming soon!

#Sui #CyberSecurity #Pure1 #AI #TechRxiv #Web3Security

[💧SuiAudit💧 @suiaudit]

[SYSTEM UPDATE] ▓▓▓▓▓▓▓▓▓░ 90%

Something Pure is coming. 💧

Stay tuned. #Sui #CyberSecurity #Pure1 #AI

[k66 @k66inthesky]

平常用VM開或者用VSCode dev網頁版是最保險

[💧SuiAudit💧 @suiaudit]

We’d like to thank @VisionM_F for the chance for SuiAudit to share our vision on stage. We also deeply appreciate the insightful feedback @djchrisssssss shared with us during the session.

🚀 Update: Our latest model is shipping this month. We can't wait to share it with you all. 🌊

[Emily @0xEmilyll]

Wrapped up my 2025 Sui journey with bootcamp post, see it here for 👉 https://t.co/bs95APSZQe

It's about deep-dived into Sui Move, built real apps, and our team shipped a dApp POC in <20hrs 🚀

Huge thanks to the amazing instructors @domenic0dev @a_xydas for the generous knowledge sharing, and to my teammates k66, @d0x0b_Himalog and Jack for the incredible collaboration. Also @VisionM_F for including me in this valuable bootcamp.

Lastly, I want to thank @k66inthesky for introducing me to @SuiNetwork.

More building ahead!🛠️

[VisionM @VisionM_F]

Recap of the first Sui dev bootcamp in Taipei.
One week of intense learning
and all teams had less than 24 hours to build a project.

Sui devs in Taiwan are truly amazing 👏

Huge thanks to the best mentors
@domenic0dev @a_xydas from @Mysten_Labs for providing us the solid learning experience. 🫡🫡🫡

Can't wait to see you all soon in 2026.

[Emily @0xEmilyll]

Truly inspired by Kris for such genuine sharing.

Noted three takeaways from this talk:
💡Learn by doing: ideas are cheap, and even MVPs don’t matter that much. You’ll figure things out as you go, that’s what really matters.

💡Do regular reality checks: markets are volatile. Continuously review your product and make sure your assumptions stay up to date.

💡Keep building and moving forward. Time will tell.

🛠️Bonus session by Harrison: how to promote yourself

Thanks @VisionM_F for hosting such practical session!

Keep building 💪

[VisionM @VisionM_F]

Amazing Builders' Night with @djchrisssssss @theharrisonkim
What we learned from your web3 journey are
- Professionalism
- Proactive
- Passionate
- Courageous
- Persistent
- Integrity
- Humble
May all the devs shine for the future with these role models.
@Scallop_io
@Mysten_Labs
@SuiCommunity
Keep building 💪

[Andrej Karpathy @karpathy]

I've never felt this much behind as a programmer. The profession is being dramatically refactored as the bits contributed by the programmer are increasingly sparse and between. I have a sense that I could be 10X more powerful if I just properly string together what has become available over the last ~year and a failure to claim the boost feels decidedly like skill issue. There's a new programmable layer of abstraction to master (in addition to the usual layers below) involving agents, subagents, their prompts, contexts, memory, modes, permissions, tools, plugins, skills, hooks, MCP, LSP, slash commands, workflows, IDE integrations, and a need to build an all-encompassing mental model for strengths and pitfalls of fundamentally stochastic, fallible, unintelligible and changing entities suddenly intermingled with what used to be good old fashioned engineering. Clearly some powerful alien tool was handed around except it comes with no manual and everyone has to figure out how to hold it and operate it, while the resulting magnitude 9 earthquake is rocking the profession. Roll up your sleeves to not fall behind.

[VisionM @VisionM_F]

Awesome sharing from @k66inthesky @0xEmilyll
Love the vibes with learning and building.
Sui devs in Taipei 💪💪💪
Can't wait for the next
💧 bootcamp stop in Taiwan.
Keep building 🫶
@SuiCommunity 🔥